
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json)
Hash identifier: z6uZEuA6Iz8hBp/2XdVLRimCu6uQgcIeGkw9YviNb/E=
Subject key identifier: 06:50:F0:92:F3:D5:01:C7:BE:FA:4C:AE:EB:F4:05:8A:3E:3F:D5:0A
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial: 0440
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
Manifest number: 0437
Signing time: Sun 01 Mar 2026 23:07:42 +0000
Manifest this update: Sun 01 Mar 2026 23:07:41 +0000
Manifest next update: Sun 08 Mar 2026 23:07:41 +0000
Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: 2C7fPAdK/I+XN4zcTtTUN+lLCYPUdgUz6/WBO1I5KnU=)
2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: y66KdD0QOcpIFGA9nwXkunesErXlVzEbxjF1BEfn6/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1088 (0x440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Validity
Not Before: Mar 1 23:07:41 2026 GMT
Not After : Mar 8 23:07:41 2026 GMT
Subject: CN=69a4c6bd-5763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:ad:78:67:e3:f9:9a:f2:56:27:25:73:02:
ba:aa:b2:db:1c:22:84:e8:a7:a2:3f:e4:b6:99:70:
da:32:9d:b7:0c:a5:e5:75:e4:fb:78:64:91:de:17:
45:61:e8:53:c8:36:ff:52:b2:e8:17:21:26:00:52:
c7:79:f0:1c:a7:84:bb:3d:75:40:71:b6:e1:87:8a:
b7:20:1c:66:5f:63:a7:81:ed:73:d8:1c:01:98:4f:
d0:0c:f5:5e:e4:04:15:f9:f5:f5:11:a1:1d:11:de:
c1:5f:3f:ea:a4:68:70:63:f3:25:cb:e6:96:7c:6b:
3c:17:a0:9c:39:e2:b9:77:73:56:a4:ae:3d:fa:b7:
8c:25:ac:30:01:de:a4:73:bb:b9:a4:7d:8d:72:a2:
2f:d7:3b:d1:84:fc:d8:60:5a:8a:6f:6f:a1:11:b6:
b9:4a:cf:e5:0d:52:35:8d:4a:a2:5e:85:fe:5d:31:
40:fc:7b:c0:87:a1:de:60:ed:b5:af:5b:2d:f5:34:
c4:1e:7f:33:1e:ac:b4:29:92:d2:63:c3:3b:20:5e:
82:97:b6:9c:3d:2b:5d:74:1c:e8:8d:d0:60:ad:2a:
e2:be:ef:6d:8a:98:ad:9e:7c:3c:87:ac:e2:65:b8:
74:2d:20:1f:83:14:6a:40:0c:68:29:c9:86:c1:07:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:50:F0:92:F3:D5:01:C7:BE:FA:4C:AE:EB:F4:05:8A:3E:3F:D5:0A
X509v3 Authority Key Identifier:
keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:41:cc:cf:5b:88:cc:ea:28:6f:76:e3:fa:b4:f6:c3:bc:72:
c0:7e:67:fe:c2:8b:62:5e:e8:45:8f:29:47:b2:bb:bc:07:9b:
3d:66:32:92:89:eb:a1:75:c3:d6:4f:b9:7b:77:90:96:b5:16:
49:86:22:85:12:44:5b:74:3c:a2:3e:93:82:6e:9c:c9:10:e8:
e6:28:82:e8:1a:d5:e1:89:47:11:17:22:93:b9:9b:17:a2:97:
70:fc:05:cd:95:8d:68:31:33:9e:c6:a5:3a:0d:b7:64:e6:31:
81:54:5f:dd:c7:b9:94:4c:ad:a4:fd:dd:32:30:da:02:11:1b:
d7:27:a6:65:19:0a:f3:f4:1b:f7:16:14:00:1e:c7:41:54:a8:
7d:d8:5d:29:35:bc:d5:9f:55:b2:60:28:cc:14:59:c8:ed:7e:
f2:58:45:28:9a:06:30:13:85:c6:24:64:8b:95:11:28:8b:ad:
a9:3a:b9:78:6d:f5:90:23:69:ce:e8:e9:ca:75:af:ad:1a:56:
7c:30:fa:57:a3:05:7e:1a:31:c2:bb:d4:6b:89:85:f7:eb:a4:
65:dd:00:e1:f7:0c:65:af:86:3b:f1:2c:07:5f:81:c5:1d:4f:
34:68:4b:a2:e3:8a:f0:e1:c1:16:0b:70:22:37:98:33:f2:88:
c7:ce:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:27 2026 by rpki-client